StackRadar

USN-8945-1

Unscored

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,257
of 18,219 indexed, latest versions
Container images
1,191
deployed by those charts
Fix available
1 of 1
affected package

xz-utils vulnerability

Carried by container images the latest versions of 1,257 of 18,219 indexed charts deploy, on 1,191 images.

Affected packageAffected versionsFixed inImages
xz-utilsdeb5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.3, 5.2.2-1.3ubuntu0.1, 5.2.4-1+9 more5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3, 5.2.2-1.3ubuntu0.1+esm2, 5.2.4-1ubuntu1.1+esm2+4 more1,191
OSV records
USN-8945-1
Trending
Rank 3 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,257 by stars
ChartLatestAffected imagesRadar Score
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

15,282
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:11.41292844148b3
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

9,163
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

118,367
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

7,300
flinkflink0.5.11 of 1See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/flink:1.14.6-scala_2.122461f02672b3
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

6,131
floriapp-mongodbfloriapp1.0.01 of 1See more

floriapp-mongodb floriapp 1.0.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

9,535
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

4,477
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

5,859
frinx-machinefrinx-helm-charts11.0.01 of 26See more

frinx-machine frinx-helm-charts 11.0.0

1 of the 26 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
frinx/conductor-server:6.1.159aa36c359f2
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

52,797
workflow-managerfrinx-helm-charts3.2.11 of 5See more

workflow-manager frinx-helm-charts 3.2.1

1 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
frinx/conductor-server:6.1.0d01264a908c9
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,142
plexfydrah-charts2.2.01 of 1See more

plex fydrah-charts 2.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
xz-utils@5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3

Open the chart page →

9,370
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mariadb:10.79a48ac9f196f
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,781
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
xz-utils@5.2.4-1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

6,320
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4
gchq/hdfs:3.3.35ec58edbb2db
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

19,061
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

10,785
garge-operatorgargeVerified publisher0.1.421 of 1See more

garge-operator garge 0.1.42

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
sondresjo/garge-operator:v1.12.2d8519457b918
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

511
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2
flyway/flyway:6.4.422d97ceb0c47
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

21,723
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

19,186
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

16,393
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

20,304
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

18,551
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

14,292
dizquetvgeek-cookbookVerified publisher4.4.21 of 1See more

dizquetv geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
vexorian/dizquetv:1.4.37e2b99844a5c
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

5,212
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

86,926
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latestc3d1bce6c698
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,983
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

10,158
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

9,525
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

12,759
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

11,164
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

13,173
lancachegeek-cookbookVerified publisher0.6.21 of 1See more

lancache geek-cookbook 0.6.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
lancachenet/monolithic:latest155817065b13
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

1,587
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

16,150
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

13,685
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

19,637
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

29,940
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

22,247
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

16,700
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

13,553
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
xz-utils@5.2.5-2ubuntu1
5.2.5-2ubuntu1.2

Open the chart page →

11,785
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

9,312
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

6,285
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:latestac252dba4165
xz-utils@5.2.5-2ubuntu1.1
5.2.5-2ubuntu1.2

Open the chart page →

3,575
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
xz-utils@5.2.4-1ubuntu1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

100,753
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
xz-utils@5.2.2-1.3
5.2.2-1.3ubuntu0.1+esm2

Open the chart page →

28,140
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

13,409
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

20,046
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

4,865
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
xz-utils@5.6.1+really5.4.5-1
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

5,310
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
xz-utils@5.6.1+really5.4.5-1ubuntu0.3
5.6.1+really5.4.5-1ubuntu0.4

Open the chart page →

7,226
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.84 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

4 of the 5 container images this version deploys carry USN-8945-1.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
xz-utils@5.2.2-1.3ubuntu0.1
5.2.2-1.3ubuntu0.1+esm2
jingking/geonetwork-hnap:4.2.843e74ab234e1
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
library/elasticsearch:7.17.1588c2ec10c7f2
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2
library/kibana:7.17.150172f1c538e7
xz-utils@5.2.4-1ubuntu1.1
5.2.4-1ubuntu1.1+esm2

Open the chart page →

38,624

Container images carrying it

1,191 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries USN-8945-1.

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.